Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: 2OjkAGvst1i0OPwnBx4IJgTlt7+M7sy2KMG4Nx9P1lo=
Subject key identifier: FE:0C:DE:B9:1A:D0:82:DB:8E:89:CB:2F:79:62:C1:0E:B2:33:3B:E8
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 019D262821660845A3D78AD2CEE8663C9B98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 11AE
Signing time: Wed 25 Mar 2026 18:00:57 +0000
Manifest this update: Wed 25 Mar 2026 18:00:57 +0000
Manifest next update: Thu 26 Mar 2026 18:00:57 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: pMFAC4EL8UE8oMkRPRhRuMZ36x6Hzwit+G6yAFHjwNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:21:66:08:45:a3:d7:8a:d2:ce:e8:66:3c:9b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Mar 25 18:00:57 2026 GMT
Not After : Mar 26 18:00:57 2026 GMT
Subject: CN=fe0cdeb91ad082db8e89cb2f7962c10eb2333be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:c6:e0:87:3d:6e:bc:7c:02:5e:8e:69:94:
df:01:63:56:38:55:ea:ee:28:c4:31:36:5d:0c:e6:
db:5a:80:a0:8b:1f:70:35:05:17:c5:66:49:47:96:
0c:fe:f8:83:e3:30:e0:42:b1:59:fa:37:e3:d5:c6:
01:fd:29:86:8f:71:b8:8f:4c:cb:f3:4d:e9:19:e2:
22:96:a5:d7:25:3c:22:b1:57:04:d8:3c:83:71:91:
fa:fe:f8:7b:73:10:fa:12:74:b2:fb:06:cf:80:77:
a3:f8:9f:1a:c3:cf:8b:34:08:39:6f:b2:3e:29:e1:
3c:34:e6:49:40:69:df:1c:b1:b3:a8:6a:90:25:8e:
06:05:d4:10:ef:06:1e:55:4f:66:17:ca:2f:9e:fe:
72:4d:f9:f2:ab:c1:10:e6:10:c4:f6:04:84:55:03:
b2:e3:2a:2b:c4:24:4d:f1:dd:65:4c:84:83:31:cf:
d1:1d:6d:2a:bd:40:7d:f1:04:ab:46:63:2c:9e:6d:
21:f4:b2:1e:53:a1:f6:7a:0f:24:f7:37:c8:19:e9:
26:ba:61:d8:5c:45:90:be:b4:2e:ff:6d:35:4a:78:
4b:e0:bc:a6:01:4c:69:c1:8d:11:b4:cd:c6:39:64:
b9:1e:9a:43:24:db:ec:42:54:9e:71:9e:99:e9:9f:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:0C:DE:B9:1A:D0:82:DB:8E:89:CB:2F:79:62:C1:0E:B2:33:3B:E8
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0c:b2:42:86:28:7d:e3:7d:f5:4c:ee:01:35:e8:20:e8:d7:
01:3f:27:ae:61:42:12:84:27:5e:cb:7b:86:ef:cf:8e:fd:7a:
d4:d5:07:f6:04:f8:4d:16:1f:e4:9b:b4:4c:20:13:19:49:23:
bb:bb:d4:6a:0e:97:0c:2f:a4:1c:df:0d:c0:47:5a:2d:f0:05:
6e:e8:c7:89:e1:9e:c4:35:73:8c:04:f9:4a:6b:b1:bf:be:fb:
97:18:4b:da:97:e2:b8:d7:e8:51:1e:13:50:2c:59:cf:b0:32:
76:29:c1:24:a6:bf:dd:87:87:4e:8c:bc:24:a2:7c:35:40:fe:
0a:14:e5:d7:84:26:6c:f9:33:84:38:91:44:70:f4:4b:53:19:
cf:b6:08:12:1f:5c:2b:9b:7a:fd:65:8e:c3:10:af:5f:61:f1:
8d:94:79:a2:bd:dd:b5:79:c0:d6:96:46:76:3a:97:f9:ca:5b:
65:a6:07:99:c7:25:8d:dc:3c:e5:b0:4b:57:da:be:8d:a3:b7:
8b:6e:e8:2f:74:5d:b1:d4:86:bf:59:06:f6:f0:07:50:2b:37:
6e:16:ea:35:09:85:34:fb:98:ee:46:10:7e:41:62:b9:67:03:
f4:1d:2a:df:f4:ba:9e:e1:b8:e2:aa:1e:7b:99:ab:56:ad:59:
91:56:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:51:17 2026 by rpki-client